I did not see any way to set a policy for which user profile attributes the user can change.  The account management UI displays all of the information in edit input boxes and presumably lets users change anything including name, email, etc.  What if I want to restrict which data users can change based on possibly their group or role?  Is that at all possible?

-Jason

Jason Axley

Sr. Security Engineer, Expedia Worldwide Engineering Team

425-679-4157 (o) | 206-484-2778 (m) | 206-55-AXLEY (gv)

333 108th Ave NE, 9S-282, Bellevue, WA 98004

EWE Security Wiki

_______________________________________________
keycloak-user mailing list
keycloak-user@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user